CVE-2025-40633

A Stored Cross-Site Scripting XSS vulnerability has been found in Koibox for versions prior to e8cbce2. This vulnerability allows an authenticated attacker to upload an image containing malicious JavaScript code as profile picture in the '/es/dashboard/clientes/ficha/' endpoint...

CVE-2025-40633 Stored Cross-Site Scripting (XSS) in Koibox

A Stored Cross-Site Scripting XSS vulnerability has been found in Koibox for versions prior to e8cbce2. This vulnerability allows an authenticated attacker to upload an image containing malicious JavaScript code as profile picture in the '/es/dashboard/clientes/ficha/' endpoint...

CVE-2025-40633 Stored Cross-Site Scripting (XSS) in Koibox

A Stored Cross-Site Scripting XSS vulnerability has been found in Koibox for versions prior to e8cbce2. This vulnerability allows an authenticated attacker to upload an image containing malicious JavaScript code as profile picture in the '/es/dashboard/clientes/ficha/' endpoint...

CVE-2025-40633

Koibox CVe-2025-40633 describes a Stored XSS in Koibox for versions before the fix commit e8cbce2. An authenticated attacker can upload an image containing JavaScript as a profile picture via the /es/dashboard/clientes/ficha/ endpoint, enabling script execution in the victim’s browser and potenti...

PT-2025-22126 · Koibox · Koibox

Name of the Vulnerable Software and Affected Versions: Koibox versions prior to e8cbce2 Description: A Stored Cross-Site Scripting XSS issue has been found, allowing an authenticated attacker to upload an image containing malicious JavaScript code as a profile picture in the...

Koibox 跨站脚本漏洞

Koibox is a beauty center management software from Koibox, Inc. A cross-site scripting vulnerability exists in versions prior to Koibox e8cbce2, which stems from allowing the upload of images containing malicious JavaScript, which could lead to a stored cross-site scripting attack...